This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json) Hash identifier: wzyty0Re9h1oJs1T7FFub+IsdbYF14MRfAP2QHyWNwM= Subject key identifier: 9C:45:AB:3D:80:C9:C1:C6:F0:30:D1:E8:E6:80:33:3F:34:35:37:01 Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439 Certificate serial: 019B3BA2B925E675479570D5E8CABBAA55D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft Manifest number: 0AB7 Signing time: Sat 20 Dec 2025 12:01:18 +0000 Manifest this update: Sat 20 Dec 2025 12:01:18 +0000 Manifest next update: Sun 21 Dec 2025 12:01:18 +0000 Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: RlTiFczYjo+6DaTrDQ/AHiY4yQV77op8ISe389XoxWU=) 2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=) 3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b9:25:e6:75:47:95:70:d5:e8:ca:bb:aa:55:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439 Validity Not Before: Dec 20 12:01:18 2025 GMT Not After : Dec 21 12:01:18 2025 GMT Subject: CN=9c45ab3d80c9c1c6f030d1e8e680333f34353701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:61:0b:24:3f:3f:dc:05:8b:42:5f:f5:1f: a2:61:a6:4d:87:5a:5b:82:47:c8:ea:e4:47:c1:4a: fc:8b:c3:be:33:42:2e:f4:86:7f:d3:e7:a8:6e:01: de:34:9c:6b:d0:c7:98:7e:cb:01:e9:aa:ab:ee:f0: 9d:32:25:3a:98:45:20:93:0c:20:c8:e7:e1:79:53: 91:1e:7a:10:b4:28:9b:2c:22:53:28:24:8b:79:38: 4e:51:54:c9:b2:11:47:78:77:6a:42:f6:61:d0:b4: da:e4:22:e1:01:9f:6c:bb:81:52:66:0a:43:1b:5f: 0b:f8:86:ba:11:e3:7b:36:1e:7a:34:3e:65:2e:34: 7b:67:d3:94:79:2f:d7:4b:e8:47:75:7c:16:51:38: 5c:cc:b4:05:49:6e:de:d8:07:df:ad:32:25:26:2c: 84:bb:ab:db:e8:33:72:65:e1:7f:f5:c7:99:16:06: ba:37:93:e8:ea:9a:95:57:5c:5d:e0:ba:b6:1d:c1: 93:29:aa:a3:a5:79:45:b2:e0:62:69:3a:a8:9e:3b: 70:25:4e:ef:08:4d:89:f9:2b:d8:cb:b4:f1:fb:f8: b5:81:5a:48:5e:8d:fc:e6:29:cb:6d:d7:c4:a6:5e: d4:e9:a2:90:20:03:8d:d2:cd:8f:2b:ca:a3:16:17: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:AB:3D:80:C9:C1:C6:F0:30:D1:E8:E6:80:33:3F:34:35:37:01 X509v3 Authority Key Identifier: keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:65:7b:8d:1d:39:a9:3c:88:6a:5d:18:ec:c3:6b:df:ca:31: 1a:84:98:9d:ee:eb:4a:c2:db:c1:80:5e:e2:1c:37:b9:0d:88: 15:a9:e0:c6:85:3b:4f:45:6f:25:3e:6a:e5:4e:52:77:18:66: 3f:48:90:6a:c2:db:6f:45:48:9c:90:6c:c9:be:00:07:36:eb: 22:c0:d8:00:db:ff:01:7e:6d:32:2b:c1:34:8b:5b:5a:f2:fa: 3a:3b:a3:07:be:5f:d3:78:c7:08:f6:1b:db:fb:b7:38:a4:12: 57:70:2e:d0:30:11:3d:81:5b:4d:88:34:c1:52:3e:67:65:4d: 73:4c:0e:74:db:c4:11:67:82:97:71:b8:4a:36:97:ac:6b:53: 73:a5:2c:e7:0e:e7:c7:c2:88:be:39:36:c4:0c:3d:50:f8:52: d4:9f:86:4c:c2:4a:44:15:e1:55:8e:04:e1:cf:ce:38:38:ae: ab:f4:9a:4b:30:36:ec:74:e6:f5:fd:cf:d1:91:2b:2d:c3:c0: aa:39:1b:51:b2:12:58:61:ef:48:4a:3f:6d:3b:5e:2f:5d:dd: 75:b4:73:bd:5f:8c:1b:68:81:74:74:cd:bf:39:69:8c:2d:61: ac:f8:3e:83:06:76:4a:91:f2:c1:7d:fb:34:ad:6d:1d:5a:ab: 45:b6:f6:e3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7orkl5nVHlXDV6Mq7qlXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0 YTA0MzkwHhcNMjUxMjIwMTIwMTE4WhcNMjUxMjIxMTIwMTE4WjAzMTEwLwYDVQQD Eyg5YzQ1YWIzZDgwYzljMWM2ZjAzMGQxZThlNjgwMzMzZjM0MzUzNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2BhCyQ/P9wFi0Jf9R+iYaZNh1pb gkfI6uRHwUr8i8O+M0Iu9IZ/0+eobgHeNJxr0MeYfssB6aqr7vCdMiU6mEUgkwwg yOfheVORHnoQtCibLCJTKCSLeThOUVTJshFHeHdqQvZh0LTa5CLhAZ9su4FSZgpD G18L+Ia6EeN7Nh56ND5lLjR7Z9OUeS/XS+hHdXwWUThczLQFSW7e2AffrTIlJiyE u6vb6DNyZeF/9ceZFga6N5Po6pqVV1xd4Lq2HcGTKaqjpXlFsuBiaTqonjtwJU7v CE2J+SvYy7Tx+/i1gVpIXo385inLbdfEpl7U6aKQIAON0s2PK8qjFhfTeQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJxFqz2AycHG8DDR6OaAMz80NTcBMB8GA1UdIwQY MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmV7 jR05qTyIal0Y7MNr38oxGoSYne7rSsLbwYBe4hw3uQ2IFangxoU7T0VvJT5q5U5S dxhmP0iQasLbb0VInJBsyb4ABzbrIsDYANv/AX5tMivBNItbWvL6OjujB75f03jH CPYb2/u3OKQSV3Au0DARPYFbTYg0wVI+Z2VNc0wOdNvEEWeCl3G4SjaXrGtTc6Us 5w7nx8KIvjk2xAw9UPhS1J+GTMJKRBXhVY4E4c/OODiuq/SaSzA27HTm9f3P0ZEr LcPAqjkbUbISWGHvSEo/bTteL13ddbRzvV+MG2iBdHTNvzlpjC1hrPg+gwZ2SpHy wX37NK1tHVqrRbb24w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:17:39 2025 by rpki-client